Last Modified: Nov 07, 2022
Affected Product:
See more info
BIG-IP AFM
Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1
Fixed In:
14.1.0
Opened: Jun 11, 2018
Severity: 3-Major
If protocol inspection profile is attached with no compliance checking or signatures enabled, the system still processes all the packets through the IPS library.
Potential performance degradation.
-- Protocol inspection profile is defined and attached to a virtual server. -- The profile contains no inspections.
If no inspections are needed, then remove the protocol inspection profile from the virtual server. Otherwise, there is no workaround.
If no inspections are enabled, there is no performance degradation when attaching the protocol-inspection profile.